PT-2025-46567 · WordPress · Team Members Showcase

Gregory Allegoet · Published 2025-11-12 · Updated 2025-12-19 · CVE-2025-11560

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Team Members Showcase WordPress plugin versions prior to 3.5.0

Description The software does not properly sanitize and escape a parameter before displaying it on a page, creating a reflected cross-site scripting condition. This could potentially be used to compromise users with high privileges, such as administrators.

Recommendations Update Team Members Showcase WordPress plugin to version 3.5.0 or later.

Exploit

Fix

Related Identifiers

CVE-2025-11560

Affected Products

Team Members Showcase

References · 7

• 🔥 https://wpscan.com/vulnerability/64d7a074-3f1d-4b09-8e96-d76b9fb3c41e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11560 · Security Note
• https://t.me/cveNotify/146389 · Telegram Post
• https://twitter.com/CVEnew/status/1988500244678820019 · Twitter Post
• https://t.me/CVEtracker/37102 · Telegram Post
• https://t.me/cveNotify/142496 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1988552157218418916 · Twitter Post